Symantec Security Advisory

SYM06-015

16 August 2006

Symantec's Veritas NetBackup (tm) PureDisk Remote Office Edition:  Non-Privileged User Authentication Bypass Elevation of Privilege

Revision History
None

Severity
Medium (highly dependent on network configuration)

 

Type of Exploit	Vulnerable
Remote Access	Yes
Local Access	No
Authentication Required	Yes (to network)
Exploit publicly available	No

Overview
Symantec discovered a security issue in Symantec's Veritas NetBackup 6.0 PureDisk Remote Office Edition. An unauthorized user with access to the network and the server hosting the management interface can potentially bypass the management interface authentication to gain access and elevate their privileges on the system.

Supported Product(s) Affected
 

Product	Version	Builds	Solution
Symantec Veritas NetBackup PureDisk Remote Office Edition	6.0	GA, MP1	NB_PDE_60_MP1_P01

NOTE: For systems running NetBackup 6.0 GA PureDisk Remote Office Edition, it will be necessary to install Maintenance Pack 1 (NB_PDE_60_MP1_283808) prior to applying this Security Pack (NB_PDE_60_MP1_P01_284636), which can be found below, in the "Related Documents" section.  This issue ONLY affects the product versions and builds listed above (6.0 and 6.0 MP1).

Details
An internal review revealed a potential elevation of privilege issue in the Symantec Veritas NetBackup PureDisk management interface.  The management interface is accessible only through a Secure Sockets Layer (SSL) Web connection by default.  However it is possible for a non-privileged user with access to the network and the server hosting the Symantec Veritas NetBackup PureDisk management interface, to bypass the management interface authentication and further leverage their access to elevate privileged access on the server

Symantec Response
Symantec Engineers have addressed the issues identified above and made a Security update available.  Symantec strongly recommends all customers apply the latest security update to protect against threats of this nature.  Symantec knows of no exploitation of or adverse customer impact from these issues.

The Maintenance Pack listed above, NB_PDE_60_MP1_P01, for affected Symantec's Veritas NetBackup PureDisk Remote Office Edition releases, is available in the "Related Documents" section below, or from the Support Web site at:    http://support.veritas.com/menu_ddProduct_NBUPDROE_view_DOWNLOAD.htm

Best Practices
As part of normal best practices, Symantec recommends:

CVE
A CVE candidate number will be requested from The Common Vulnerabilities and Exposures (CVE) initiative. This advisory will be revised accordingly upon receipt of the CVE Candidate name.  This issue is a candidate for inclusion in the CVE list which standardizes names for security problems.    http://cve.mitre.org/

If you have not received this as a Software Alert from the Symantec Email Notification Service, please visit the following link to subscribe:    http://maillist.support.veritas.com/subscribe.asp . To receive notifications of critical technical issues, like this one, select "Software Alerts" for each product running in your environment. To receive monthly updates on new or republished TechNotes, select "Digest" updates.